Re: Trigger performance

From: Brian Peasland <peasland_at_edcmail.cr.usgs.gov>
Date: Thu, 16 Sep 1999 13:09:04 GMT
Message-ID: <37E0EBF0.6C23D57A@edcmail.cr.usgs.gov>

Jens Loebling wrote:
> Please do not use Javascrip or VB-Script or other active contens
> because they are dangerus. Please check this web pages.
> http://www.netscape.com/security/notes/jscachebrowsing.html
> http://www.netscape.com/security/notes/sohrjava.html
> http://www.eu.microsoft.com/Security/Bulletins/ms99-037.asp
> The only way to provide secure web pages is to do the active part on
> the server.

Javascript has been used for many years to validate input data. There are millions of web sites that use javascript just fine. The articles you mentioned above discuss security holes in the browser that lets a malicious individual wreak havoc on the user's system. But these security holes have not stopped many "well-intentioned" application developers from using Javascript, Java, or other tools in their development.

As a user, you have to decide if visiting a site will pose a threat to your system. This is especially important if it is not a trusted site.

Brian Received on Thu Sep 16 1999 - 08:09:04 CDT